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CLAIMS: 



1 . A record carrier (1) comprising an information area (2) for storing 
information, and an integrated circuit (3) comprising a storage unit (4) for storing additional 
information (Ar, Ri^ts), the integrated circuit further comprising a one-time programmable 
memory (5) comprising a resurrection key (Rk), the one-time programmable memory having 
a substantially larger data retention time than ttie storage unit. 

2. A record carrier according to claim 1 , wherein the one-time programmable 
memory (5) further comprises information related to the expiration date Pexp) of the 
information stored or to be stored in the information area. 

3. A record carrier according to claim 1 or 2, wherein the record carrier further 
comprises a disc key (CID_key). 

4. A record carrier according to claim 3, wherein the resurrection key (Rk) is 
encrypted with the disc key (CBDJkey). 

5 . A record carrier according to claim 3, wherein the expiration date (E>exp) is 
encrypted with the disc key (CIDJcey). 

6. A record carrier according to any one of claims 3 and 4, wherein the disc key 
(CIDJcey) is a unique disc key that is derived from an identifier (IDuc) of the integrated 
circuit (3). 

7 A record carrier according to claim 6, wherein the one-time programmable 

memory (5) fiirther comprises the identifier (IDUC). 

8. A record carrier according to any one of claims 1 to 7, wherein the one-time 

programmable memory (5) is realized in fuse-logic. 
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9. A record carrier according to any one of claims 1 to 8, wherein the storage unit 
(4) is an EEPROM having a data retention time of approximately 10 years. 

10. A record carrier according to any one of claims 1 to 9, wherein the integrated 
5 circuit (3) is contactlessly readable. 

11. A method of restoring the additional information (Ar, Rights) stored in the 
storage unit (4) present on the integrated circuit (3) of the record carrier (1) of any one of 
claims 1 to 10, the method comprising the steps of: 

1 0 . reading out the additional information stored in the storage unit (1 1); 

checking the mtegrity of the additional information (12); 
and, if the integrity of the additional information is insufBcient, 

reading out the resurrection key (Rk) stored in the one-time programmable 
memory (5) and restoring the additional information by using the resurrection key (15). 

15 

12. A method according to claim 1 1 , wherein, if the integrity of the additional 
information is insufficient (12), the method further comprises the step of checking whether 
the additional information has degenerated m a natural way (14), and wherem the step of 
reading out the resurrection key (Rk) stored in the one-time programmable memory (5) and 

20 of restoring the additional information by using the resurrection key (Rk) is only performed if 
the additional information has degenerated in a natural way. 

13. A method according to claim 1 1 or 12, wherein the step of restoring the 
additional mformation by using the resurrection key is performed by a Trusted Hurd Party 

25 (content provider) or on the Internet via a Secure Authenticated Channel (SAC-9). 

14. A method according to any one of claims 1 1 to 13, wherein the expiration date 
(Dbxp) is used in the step of checking whether the additional information has degenerated in a 
natural way (14). 
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15. An apparatus for performing the method according to any one of claims 1 1 to 

14, the apparatus comprising a security module (7) comprising: 

means for reading out the additional information (Ak, Rights) stored in the 
storage unit (4); 
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means for checking the integrity of liie additional information; 

means for reading out the resurrection key (Ri^ stored in the one-time 
programmable memory (5) and restoring the additional information by using the resurrection 
key if the integrity of the additional information is insufficient. 

16. An integrated circuit for use in the record carrier (1) according to any one of 

claims 1 to 10, the integrated circuit comprising a storage unit (4) for storing additional 
information (Ak, Rights), and the one-time programmable memory (5) comprising a 
resurrection key (Rr). 



